Hirudo Android Trojan uses fake updates and patched bank apps

Hirudo Android banking Trojan diagram with fake-update lure, second APK, patched Indonesian banking apps, credential and SMS theft; briefing badge reads 15 Oct 2026, 11:07 PM SGT.

BRIEFED · 15 OCT 2026 · 11:07 PM SGT — ThreatFabric reports Hirudo, an Android banking RAT that uses fake updates and can target selected banking apps with patched copies. Users and banks should treat unexpected app replacement and permission prompts as warning signs.